drawer component for react
82%
Total Score
100
100
94
50
The package has a prepare install-time lifecycle script. This can add installation behavior to review, but the signal alone does not show unsafe activity.
The package has 136 releases over more than 10 years, but no registry releases in the last 12 months. Recent repository commits partly compensate for the paused publishing cadence, but the release gap remains a maintenance concern.
No repository security policy was found. That reduces transparency for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe.
All four workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, 3 workflows use top-level write permissions and 4 of 6 action references are unpinned, creating moderate workflow hygiene gaps.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rc-util Version ^5.38.1 | — | — |
rc-motion Version ^2.6.1 | — | — |
classnames Version ^2.2.6 | — | — |
@babel/runtime Version ^7.23.9 | — | — |
@rc-component/portal Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.